基于SNMPv3的网络设备安全管理系统的设计与实现软件工程专业论文.docxVIP

本文最后采用自主开发的一个基于本系统的测试软件进行测试，介绍了 测试过程和结果，并对测试结果进行了分析。 关键词 网络管理；SNMPv3；安全；访问控制 Abstract Computer networks become more and more important in all social fields. With the scale of computer network being enlarged, the architecture of computer network complicated and the security of computer network demanded, a powerful computer network management system is required to carry out all kinds of computer network management tasks and ensure the computer network to work efficiently and steadily. In the early 1990s, as Simple Network Management Protocols (known as SNMP) is characteristic of simplicity, easy performance and wide usage of TCP/IP based network, wide adoption of SNMP has been so popular for network management that it becomes the virtual standard in this field. Because the majority network facilities are embedded with SNMP proxy programs, the network managers can monitor the operation’s processing, set the parameters and collect data of network’s performance. At present time, the usually used versions, SNMPv1 and SNMPv2 are security deficient， easily to be attacked by such means as modification of information, masquerade, disclosure and message stream modification. SNMPv3 was designed and developed to satisfy the need for security. It brings forward an open framework for security architecture, and proposes two models--User-based Security Model (USM) and View-based Access Control Model (VACM). The definition of SNMPv3 is comprised of the following items: framework including SNMPv1 and SNMPv2, a whole new security system containing verification service and encrypted service, and a set of specific code for network security and access control. This thesis mainly elaborates on the design and realization of network management system based on SNMPv3 protocols. The system contains two parts—Device End and Manager End. By means of supervision on communication facilities through SNMPv3 and two open source projects -- net-snmp and SNMP4J the two models, USM and VACM,